VDB
GCVE-110-OSM-2026-8732
GCVE-110-OSM-2026-8732
Advisory PublishedCVSS 8.8/10
Malicious package detected. Behaviors: data exfiltration, code execution.
DESTINATION
- telegram-bot: 8603731601:AAHr7Oi_ylLF4LBnodPRmHxLTOaUlTLMODo (primary, plaintext) in qiangdingg/utils/telegram.py
- telegram-bot: api.telegram.org/bot{TELEGRAM_TOKEN}/sendMessage (plaintext) in qiangdingg/utils/telegram.py
EXFIL
- Data Encoding for Exfiltration in qiangdingg/core/classifier.py: "base64.b64encode("
- Network Request in qiangdingg/core/classifier.py: "requests.post("
- Network Request in qiangdingg/utils/telegram.py: "requests.post("
ADDITIONAL FINDINGS
- Shell Command Execution in qiangdingg/utils/helpers.py: "os.system("
PAYLOAD FILES
qiangdingg/core/classifier.py
INDICATORS (IOCs)
- domains: qiangdingg.web.app, rich.live
- payloadFileHash: b7db0defdb1c1ab9782864f2a9d5e91a24984751ae418c9ac62ba04bf736df3d
- urls: https://t.me/ratguifilebot
TELEGRAM THREAT-ACTOR INTELLIGENCE (live API enrichment):
Bot @ratguifilebot (id 8603731601)
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | scan-checker | all (affected) | — |
Aliases
Browse GCVE Records
75,827 records in the GCVE database · Updated August 3, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.